Lucene search
Veracode Vulnerability DatabaseVERACODE:22123HistoryDec 06, 2019 - 5:56 a.m.
Information Disclosure
2019-12-0605:56:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
22.7%
sylius/sylius is vulnerable to information disclosure. The vulnerability exists as the internal exception message gets exposed in the login action through the value of last_error.message in Security/_login.html.twig.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sylius/sylius | le | 1.3.13 | |
| sylius/sylius | le | 1.4.9 | |
| sylius/sylius | le | 1.5.6 | |
| sylius/sylius | le | 1.6.2 |
Related
github
github
Internal exception message exposure for login action in Sylius
2019-12-05 19:57:04
osv
osv
Internal exception message exposure for login action in Sylius
2019-12-05 19:57:04
CVE-2019-16768
2019-12-05 20:15:09
prion
prion
Design/Logic Flaw
2019-12-05 20:15:00
cvelist
cvelist
nvd
nvd
CVE-2019-16768
2019-12-05 20:15:09
cve
cve
CVE-2019-16768
2019-12-05 20:15:09